How do you protect customer data collected through forms?

Forms are encrypted, collect only the information needed, and data flows are mapped for UK GDPR. Sites run behind Cloudflare with a web application firewall, backups and monitoring.